All Products
Document Center

Elastic Compute Service:Quick start for Windows instances

Last Updated:Jan 30, 2024

This topic describes how to create and manage Windows instances in the Elastic Compute Service (ECS) console. In this topic, Internet Information Services (IIS) is configured for an ecs.g6.large instance that runs a Windows Server 2016 operating system.

Make preparations

  1. Create an account and complete the account information.

  2. (Optional) Alibaba Cloud provides default virtual private clouds (VPCs). If you do not want to use the default VPC in the region where you want to create an ECS instance, create a VPC and a vSwitch.

    For more information, see Create a VPC with an IPv4 CIDR block.

  3. (Optional) Alibaba Cloud provides default security groups. If you do not want to use the default security group in the region where you want to create an ECS instance, create a security group.

    For more information, see Create a security group.

Step 1: Create an ECS instance

  1. Go to the Custom Launch tab of the instance buy page in the ECS console.

  2. In the first four steps of the instance creation wizard on the Custom Launch tab, configure parameters for the instance.

    The following table describes the parameters that are used in this topic. For parameters that are not described in this topic, use the default values.





    Basic Configurations

    Billing Method


    The pay-as-you-go billing method allows flexible operations. For more information, see Billing overview.

    Region and Zone

    • Region: China (Hangzhou)

    • Zone: Random

    You cannot change the region or zone after the instance is created. Proceed with caution when you set this parameter.

    Instance Type

    • Instance Family: General-purpose Type g6

    • Instance Type: ecs.g6.large

    The available instance types vary based on the region that you select and the resource inventory in the region.

    You can go to the ECS Instance Types Available for Each Region page to view the instance types available in each region.


    • Type: Public Image

    • Version: Windows Server 2016 Datacenter 64-bit

    When the instance is started, the operating system and application data of the image are copied to the system disk.




    Select an existing VPC. VPCs whose name contain the [Default] prefix are automatically created in the ECS console.

    Assign Public IPv4 Address

    Assign Public IPv4 Address

    If you select Assign Public IPv4 Address, the system assigns a public IPv4 address to the instance.

    Bandwidth Billing


    If you select Pay-by-traffic, you are charged based on the amount of traffic that is transmitted over the Internet. For more information, see Public bandwidth.


    2 Mbps


    Security Group

    • Security Group ID: [Default]sg-bp1bhjjsoiyx44******

    • Rule: Select ICMP, SSH (22), RDP (3389), HTTP (80), and HTTPS (443).

    Select an existing security group. Security groups whose names contain the [Default] prefix are automatically created in the ECS console.

    System Configurations (Optional)

    Logon Credentials

    Custom Password

    In this topic, Custom Password is selected. In this case, you must set a password that you can use to connect to and log on to the instance.

    Logon Username


    For Windows instances, the default logon username is administrator. By default, when you use the administrator account to log on to the instance, you have the administrative permissions and can create other accounts on the instance.

    • To prevent data loss caused by accidental operations, proceed with caution when you use the administrator account to perform operations, such as resizing disks, managing spanned volumes or the registry, and installing system updates.

    • Do not rename, delete, or disable the administrator account. Otherwise, the use of the instance may be affected.

    Logon Password


    If you set Logon Credentials to Custom Password, you must configure the Logon Password and Confirm Password parameters. When you connect to the instance, you must use the administrator username and the password that you specify in this section.

    Instance Name


    In this topic, EcsQuickStart is used as the instance name.

    Grouping (Optional)



    If you create multiple instances, we recommend that you add tags to facilitate management.

  3. Click Next. In the Preview step, confirm the configurations in the Configurations section or click the 编辑-图标 icon to modify the configurations.


  4. (Optional): Click Save as Launch Template. In the Save as Launch Template dialog box, enter a name and description for the launch template.


    Save the instance configurations that you made as a launch template. Then, you can create instances by using the template without the need to make the configurations again.

  5. Read and select ECS Terms of Service and Product Terms of Service. Then, click the Create Instance or Create Order.

  6. In the Success message, click Console to go to the Instances page and view the instance creation progress.

    If the instance is in the Running state, the instance is created. Copy the public IP address of the instance for use to connect to the instance.

Step 2: Add security group rules

If you did not add rules to the default security group or if you added the instance to a new security group when you create the instance, perform the following steps:

  1. Click the instance ID to go to the Instance Details page.

  2. On the Instance Details page, click the Security Groups tab. Click the ID of a security group to go to the Security Group Details page.

  3. In the Access Rule section, click the Inbound tab.

  4. Click Quick Add to add security group rules as described in the following table. For parameters that are not described in this topic, use the default values.


    Port Range

    Authorization Object


    • SSH 22

    • RDP 3389

    • HTTP 80

    • HTTPS 443

    • In the Port Range section, select the ports that you want to open for applications that run on the instance. For example, select HTTP (80) that is used in Step 4: Configure IIS.

    • indicates all CIDR blocks. If you know the IP address of the requester, we recommend that you set Authorization Object to a specific IP address range that contains the IP address.

  5. Click OK.

Step 3: Connect to the ECS instance

  1. Go back to the Instances page and find the instance to which you want to connect. In this topic, the EcsQuickStart instance is used. In the Actions column, click Remote.

  2. In the Remote connection dialog box, click Sign in now in the Workbench section.

  3. In the Instance Login dialog box, configure parameters and click OK.

    • Username: Enter administrator.

    • Password: Enter the password that you set when you configure Logon Password in the Logon Credentials section during ECS instance creation.


If an error occurs, check whether port 3389 is opened. If the port is not opened, perform the operations that are described in Step 2: Add security group rules to open port 3389.

Step 4: Configure IIS

  1. Start Command Prompt.

  2. Enter powershell to switch to PowerShell.

  3. Install IIS and the management tools.

    Install-WindowsFeature -name Web-Server -IncludeAllSubFeature -IncludeManagementTools
  4. After IIS is installed, open a web page in the current browser, enter the public IP address of the instance in the address bar, and then press the Enter key.

    http://<Public IP address of the instance>


Step 5: (Optional) Resolve a domain name

Direct access to IIS by using the public IP address of the instance may compromise server security. If you already have a domain name or if you want to register a domain name, perform the following steps:

  1. Register a domain name.

    For more information, see Register a domain name on Alibaba Cloud.

  2. Apply for an Internet Content Provider (ICP) filing for the domain name.

    If the website to which the domain name points is hosted on an ECS instance in a region inside the Chinese mainland, you must apply for an ICP filing for the domain name.

  3. Resolve the domain name to point to the public IP address of the instance.

    Domain name resolution is a prerequisite for using domain names to access your website. For more information, see Get started with Alibaba Cloud DNS.

  4. Use the resolved domain name to access IIS. Example:

Step 6: (Optional) Release the ECS instance

You can release the instance if you no longer need it. After the instance is released, billing for the instance stops, and data of the instance is lost and cannot be restored.


The operations in this section apply only to pay-as-you-go instances.

  1. Go back to the Instances page and find the EcsQuickStart instance.

  2. In the Actions column, choose More > Instance Status > Release.

  3. Set Release Mode to Release Now and click Next.

  4. In the Release message, verify the instance information and click OK.

Step 7: View bills

  1. In the top navigation bar of the ECS console, choose Expenses > User Center.

  2. In the left-side navigation pane, choose Bills > Bill Details. Then, click the Billing Details tab.

  3. Set Instance Name to EcsQuickStart and click Search.

What to do next